Re: [Freeipa-users] ipa replica is ad trust controller but refuses ad users

2016-01-28 Thread Jakub Hrozek
On Thu, Jan 28, 2016 at 02:39:47PM +0100, Rob Verduijn wrote: > hmmm > It suddenly started to work.weird. > > On both servers I changed dns_lookup_realm = true (was false) > stoped sssd and cleared the sssd cache > rm /var/lib/sss/db/* > started sssd and it works now it's hard to tell w/o

Re: [Freeipa-users] ipa replica is ad trust controller but refuses ad users

2016-01-28 Thread Rob Verduijn
hmmm It suddenly started to work.weird. On both servers I changed dns_lookup_realm = true (was false) stoped sssd and cleared the sssd cache rm /var/lib/sss/db/* started sssd and it works now But I find it hard to believe that was the cause. Is there a cache involved somewhere ? Rob

Re: [Freeipa-users] ipa replica is ad trust controller but refuses ad users

2016-01-28 Thread Jakub Hrozek
On Thu, Jan 28, 2016 at 03:36:04PM +0100, Jakub Hrozek wrote: > On Thu, Jan 28, 2016 at 02:39:47PM +0100, Rob Verduijn wrote: > > hmmm > > It suddenly started to work.weird. > > > > On both servers I changed dns_lookup_realm = true (was false) > > stoped sssd and cleared the sssd cache > >